CVE-2025-8236: code-projects Online Ordering System edit_product.php sql injection
A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8236?
CVE-2025-8236 has been declared as a critical vulnerability.
How does CVE-2025-8236 affect the Online Ordering System?
CVE-2025-8236 affects the /admin/edit_product.php file, allowing SQL injection through the Name argument.
Can CVE-2025-8236 be exploited remotely?
Yes, CVE-2025-8236 can be exploited remotely.
What is the primary risk associated with CVE-2025-8236?
The primary risk associated with CVE-2025-8236 is unauthorized access to the database due to SQL injection.
How can I remediate CVE-2025-8236?
To remediate CVE-2025-8236, ensure proper input validation and use prepared statements to prevent SQL injection.